$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa File: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (raw, json) Hash identifier: wlujEilvSGoE2xmgZ9r1cOQVVwj+z/fdPDzPxBXeMcU= Subject key identifier: 83:B4:B3:C9:02:47:59:B7:66:6B:08:D9:C0:F6:23:C4:B4:93:13:2D Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 4CDAAA8C072EB8AA02E1A05A077D1D8337B0F274 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa Signing time: Fri 17 Apr 2026 17:01:31 +0000 ROA not before: Fri 17 Apr 2026 16:56:31 +0000 ROA not after: Fri 16 Apr 2027 17:01:31 +0000 asID: 215171 IP address blocks: 2a14:7581:4560::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:da:aa:8c:07:2e:b8:aa:02:e1:a0:5a:07:7d:1d:83:37:b0:f2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Apr 17 16:56:31 2026 GMT Not After : Apr 16 17:01:31 2027 GMT Subject: CN=83B4B3C9024759B7666B08D9C0F623C4B493132D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dc:53:f2:7b:21:30:c9:bb:26:fa:de:72:11: a3:23:48:a7:59:34:b6:9c:7a:4a:41:c1:14:d2:46: 08:6e:18:38:cb:d4:48:8a:49:8a:3b:6f:63:33:a7: f8:30:70:5c:97:83:c8:75:16:ce:09:e7:18:e2:43: b4:d3:f3:96:7e:9b:f8:0b:af:b6:0a:e8:60:85:c7: 94:bf:b8:37:28:e8:a7:71:b3:a0:17:22:7c:01:ce: 76:63:71:1a:95:48:2a:ab:3f:b6:df:62:c2:51:75: d8:3c:17:76:f8:39:d8:5d:01:69:89:ef:f5:ce:39: 30:3c:d9:1f:c0:9d:7d:43:81:4e:98:54:89:b5:9a: 3a:c5:6a:ea:b7:1b:a6:a2:6a:bf:f3:d0:8d:f2:42: 7c:7a:cf:96:0b:61:e3:1a:ac:7f:e6:f4:20:37:90: a9:2f:c1:58:4b:3e:95:17:d4:ce:15:1c:c1:bc:27: e7:dd:58:89:14:5e:a2:e8:88:17:ac:fe:e9:07:35: 3c:09:10:0c:2e:f6:c3:54:a5:17:e8:5e:1e:a0:f6: 1f:23:fa:d4:fc:c2:94:69:dd:46:d5:d8:3b:8f:7a: dc:ff:fa:85:4a:a4:69:b6:7f:c4:af:d1:33:af:22: 39:5b:50:67:58:fc:1a:28:d7:c4:80:59:35:a3:15: b5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B4:B3:C9:02:47:59:B7:66:6B:08:D9:C0:F6:23:C4:B4:93:13:2D X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:4560::/44 Signature Algorithm: sha256WithRSAEncryption b8:28:b7:df:58:1a:58:22:7c:39:8d:e1:b3:11:0e:51:04:aa: f9:42:d4:de:5f:d1:e1:e4:7a:48:2c:0a:50:6e:bc:1f:4b:b4: 3d:79:6c:f0:4d:04:15:37:26:54:f8:da:fa:ff:ae:2d:89:91: df:dd:19:80:a5:2f:15:99:9d:17:84:86:3e:5e:75:59:92:8a: c0:ae:68:f0:b2:09:40:35:c3:06:32:7a:96:f7:a4:b5:e4:79: 85:d7:08:8c:0d:4a:68:99:7e:0a:2c:8b:7a:46:d4:16:9e:73: 72:0c:aa:bc:a6:44:ff:81:29:bb:6e:9a:a3:ac:af:f1:75:d7: 06:c5:54:5c:82:71:31:c9:12:c1:35:3e:e7:49:6d:d2:a9:62: 70:61:e5:aa:09:2d:d0:f8:87:53:86:7c:46:18:db:a5:6c:5f: b9:05:37:cc:7c:07:6f:01:36:ad:ef:3c:5a:8e:14:65:b1:c2: 03:02:8d:7c:53:7b:b1:d5:01:a2:33:6f:cc:b4:69:a2:94:da: 54:f6:56:09:28:35:cc:73:21:0c:38:a9:a8:09:3d:f9:f8:e7: 7c:4a:5b:f4:e4:94:7f:d7:51:86:7b:2d:2f:e1:ac:4a:7c:11: dc:8a:42:fc:08:5d:e7:fd:06:e2:db:34:16:61:db:53:53:4b: ef:8a:88:24 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUTNqqjAcuuKoC4aBaB30dgzew8nQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNjA0MTcxNjU2MzFaFw0yNzA0MTYxNzAxMzFaMDMxMTAvBgNV BAMTKDgzQjRCM0M5MDI0NzU5Qjc2NjZCMDhEOUMwRjYyM0M0QjQ5MzEzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg3FPyeyEwybsm+t5yEaMjSKdZ NLacekpBwRTSRghuGDjL1EiKSYo7b2Mzp/gwcFyXg8h1Fs4J5xjiQ7TT85Z+m/gL r7YK6GCFx5S/uDco6Kdxs6AXInwBznZjcRqVSCqrP7bfYsJRddg8F3b4OdhdAWmJ 7/XOOTA82R/AnX1DgU6YVIm1mjrFauq3G6aiar/z0I3yQnx6z5YLYeMarH/m9CA3 kKkvwVhLPpUX1M4VHMG8J+fdWIkUXqLoiBes/ukHNTwJEAwu9sNUpRfoXh6g9h8j +tT8wpRp3UbV2DuPetz/+oVKpGm2f8Sv0TOvIjlbUGdY/Boo18SAWTWjFbUdAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUg7SzyQJHWbdmawjZwPYjxLSTEy0wHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzUzNjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM1MzEzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gUVgMA0GCSqGSIb3DQEBCwUAA4IBAQC4 KLffWBpYInw5jeGzEQ5RBKr5QtTeX9Hh5HpILApQbrwfS7Q9eWzwTQQVNyZU+Nr6 /64tiZHf3RmApS8VmZ0XhIY+XnVZkorArmjwsglANcMGMnqW96S15HmF1wiMDUpo mX4KLIt6RtQWnnNyDKq8pkT/gSm7bpqjrK/xddcGxVRcgnExyRLBNT7nSW3SqWJw YeWqCS3Q+IdThnxGGNulbF+5BTfMfAdvATat7zxajhRlscIDAo18U3ux1QGiM2/M tGmilNpU9lYJKDXMcyEMOKmoCT35+Od8Slv05JR/11GGey0v4axKfBHcikL8CF3n /Qbi2zQWYdtTU0vviogk -----END CERTIFICATE-----Generated at Sat Apr 18 00:07:14 2026 by rpki-client